What’s Vulnerable › Products

himmelblau-idm himmelblau vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your himmelblau-idm himmelblau version is affected

Latest himmelblau-idm himmelblau vulnerabilities

• CVE-2026-45108 — Himmelblau: Authentication Bypass via Cross-User Local Session Impersonation in Device Authorization Grant (DAG) Flow (CVSS 8.4)
• CVE-2026-34397 — himmelblau: NSS fake-primary group lookup reintroduces name collision risk (CVSS 7.0)
• CVE-2026-31979 — himmelblaud-tasks: local privilege escalation via /tmp symlink attack on Kerberos ccache (CVSS 7.8)
• CVE-2026-31957 — Himmelblau unset domain configuration can allow any-tenant authentication at first login for remote deployments (CVSS 10.0)
• CVE-2025-59044 — Himmelblau vulnerable to GID collision via group name-derived mapping (privilege escalation) (CVSS 4.4)
• CVE-2025-54882 — Himmelblau's Kerberos credential cache collection is world readable (CVSS 7.1)
• CVE-2025-54781 — Himmelblau leaks an Intune service access token in its logs (CVSS 2.8)
• CVE-2025-53013 — Himmelblau offline auth permits authentication with invalid Hello PIN (CVSS 5.2)
• CVE-2025-49012 — Himmelblau's Name-Based Group Matching in `pam_allow_groups` Leads to Potential Security Bypass (CVSS 5.4)
• CVE-2025-24034 — Himmelblau leaks credentials in the debug log (CVSS 3.2)